Systems and methods for login and authorization

• US 9,882,885 B2
• Filed: 06/30/2015
• Issued: 01/30/2018
• Est. Priority Date: 06/25/2013
• Status: Active Grant

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: Ren, Min
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Debnath, Suman
• Application Number:
  US14/754,809
• Publication Number:
  US 20150304301A1
• Time in Patent Office: 945 Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Systems and methods are provided for login and authorization. For example, a third-party terminal receives a login request from a user and sends an authorization request from the third-party terminal to a network server; the network server generates first two-dimensional-barcode information and sends the first two-dimensional-barcode information to the third-party terminal; the third-party terminal displays a first two-dimensional-barcode image; a mobile terminal extracts the first two-dimensional-barcode information from the first two-dimensional-barcode image and sends first user account information and the first two-dimensional-barcode information to the network server; the network server validates the first user account information and the first two-dimensional-barcode information based on at least information associated with stored second user account information and second two-dimensional-barcode information generated by the network server.

Claims

1. A method for login comprising:

receiving a login request from a user;

sending an authorization request to a network server;

receiving first two-dimensional-barcode information from the network server;

displaying a first two-dimensional-barcode image;

acquiring information related to a logged-in state of a user account from a third-party server; and

setting an interface of a third-party application to a user-logged-in state;

wherein the third-party server sets the user account to the logged-in state and sends the information related to the logged-in state of the user account after the network server validates user account information sent from a mobile terminal and the first two-dimensional-barcode information extracted from the first two-dimensional-barcode image;

wherein;

the authorization request includes authorization parameters to be validated by the network server; and

the authorization parameters include an application identifier, authorization scope information, an application callback address, anti-disguise information and an application key.

2. The method of claim 1, wherein the first two-dimensional-barcode information includes the authorization parameters.

3. The method of claim 1, further comprising:

sending at a predetermined time an authorization inquiry to the third-party server.

4. A method for authorization comprising:

receiving an authorization request from a third-party terminal;

generating first two-dimensional-barcode information;

sending the first two-dimensional-barcode information to the third-party terminal so that the third-party terminal displays a first two-dimensional-barcode image;

validating user account information and the first two-dimensional-barcode information sent from a mobile terminal based on at least information associated with stored user account information and second two-dimensional-barcode information, wherein the first two-dimensional-barcode information sent from the mobile terminal is extracted by the mobile terminal from the first two-dimensional-barcode image displayed on the third-party terminal; and

in response to the user account information and the first two-dimensional-barcode information being validated, sending an authorization and a predetermined user identifier to the third-party server;

wherein;

the authorization request includes authorization parameters; and

the authorization parameters include an application identifier, authorization scope information, an application callback address, anti-disguise information and an application key.

5. The method of claim 4, further comprising:

validating the authorization parameters in the authorization request.

6. The method of claim 5, wherein the first two-dimensional-barcode information includes the authorization parameters.

7. The method of claim 4, wherein the in response to the user account information and the first two-dimensional-barcode information being validated, sending an authorization and a predetermined user identifier to the third-party server includes:

in response to the user account information and the first two-dimensional-barcode information being validated, sending validation-success information to the mobile terminal;

receiving an authorization confirmation of a user from the mobile terminal; and

sending the authorization and the predetermined user identifier to the third-party server.

8. The method of claim 4, wherein:

the user identifier corresponds to the user account; and

the user account corresponds to different user identifiers when the user account logs into different third-party applications.

9. The method of claim 4, wherein the authorization includes an authorization-validity character string and anti-disguise information.

10. A network server comprising:

an authorization-request-receiving unit configured to receive an authorization request from a third-party terminal;

a two-dimensional-barcode-generation unit configured to generate first two-dimensional-barcode information;

a two-dimensional-barcode-sending unit configured to send the first two-dimensional-barcode information to the third-party terminal so that the third-party terminal displays a first two-dimensional-barcode image;

a validation-information-receiving unit configured to receive user account information and the first two-dimensional-barcode information from a mobile terminal;

a validation unit configured to validate the user account information and the first two-dimensional-barcode information based on at least information associated with stored user account information and second two-dimensional-barcode information generated by the two-dimensional-barcode-generation unit, wherein the first two-dimensional-barcode information sent from the mobile terminal is extracted by the mobile terminal from the first two-dimensional-barcode image displayed on the third-party terminal; and

an authorization-information-sending unit configured to, in response to the user account information and the first two-dimensional-barcode information being validated, send an authorization and a predetermined user identifier to the third-party server;

wherein;

the authorization request includes authorization parameters; and

the authorization parameters include an application identifier, authorization scope information, an application callback address, anti-disguise information and an application key.

11. The network server of claim 10, further comprising:

an authorization-parameter-validation unit configured to validate the authorization parameters in the authorization request.

12. The network server of claim 10, wherein the first two-dimensional-barcode information includes the authorization parameters.

13. The network server of claim 10, further comprising:

a confirmation-information-sending unit configured to, in response to the user account information and the first two-dimensional-barcode information being validated, send validation-success information to the mobile terminal; and

a confirmation-information-receiving unit configured to receive an authorization confirmation of a user from the mobile terminal;

wherein the authorization-information-sending unit is further configured to send the authorization and the predetermined user identifier to the third-party server.

14. The network server of claim 10, wherein:

the user identifier corresponds to the user account; and

the user account corresponds to different user identifiers when the user account logs into different third-party applications.

15. The network server of claim 10, wherein the authorization includes an authorization-validity character string and anti-disguise information.

16. The network server of claim 10, further comprising:

one or more data processors; and

a computer-readable storage medium;

wherein one or more of the authorization-request-receiving unit, the two-dimensional-barcode-generation unit, the two-dimensional-barcode-sending unit, the validation-information-receiving unit, the validation unit, and the authorization-information-sending unit are stored in the storage medium and configured to be executed by the one or more data processors.